This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GThusBjSSD1_iE21_fnCPzPjJvk.roa
File:                     GThusBjSSD1_iE21_fnCPzPjJvk.roa (raw, json)
Hash identifier:          kNNDS1tA00HsAlDB4vvyElivwsFS8rrkFshjMcVfYZ0=
Subject key identifier:   19:38:6E:B0:18:D2:48:3D:7F:88:4D:B5:FD:F9:C2:3F:33:E3:26:F9
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F8506404AB313588D14AB0072331F55
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GThusBjSSD1_iE21_fnCPzPjJvk.roa
Signing time:             Fri 02 Jan 2026 16:23:02 +0000
ROA not before:           Fri 02 Jan 2026 16:23:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209067
IP address blocks:        92.253.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:06:40:4a:b3:13:58:8d:14:ab:00:72:33:1f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:23:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19386eb018d2483d7f884db5fdf9c23f33e326f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:6d:f4:6c:c7:89:32:c5:2d:fc:04:35:39:
                    e8:b4:cb:5c:92:8e:58:07:3a:44:24:6e:84:9f:53:
                    a9:37:1d:dc:77:cd:14:33:69:85:35:77:d4:9c:b8:
                    c1:16:c6:e1:d3:d2:b6:c3:93:3b:09:5a:1e:14:a5:
                    68:6d:ee:09:23:d4:6e:dd:be:df:d6:ae:9b:af:1e:
                    17:a9:a7:4a:2b:d6:68:1f:5f:5e:f5:ef:85:4d:64:
                    20:0a:15:c5:d5:53:b7:2b:ba:65:03:f7:47:d7:be:
                    7c:6e:af:7e:de:68:d2:15:76:cc:26:63:0a:3c:1e:
                    be:e3:0d:18:52:9f:c5:ad:6c:f5:f9:67:e7:b1:7b:
                    46:8d:c0:e0:dc:de:4f:c8:54:49:25:ee:ad:b7:5b:
                    c5:ba:06:04:42:95:cb:5a:10:9a:68:f4:c8:e3:69:
                    ee:6c:93:bd:a8:df:76:d7:70:55:ce:b3:17:c8:60:
                    7c:f2:60:30:6d:03:a1:13:23:f3:2c:0a:a8:d8:71:
                    b8:aa:2d:a8:ce:a1:56:bf:24:a2:d4:5f:7e:7e:76:
                    2c:c9:4a:c0:23:74:2a:06:05:2b:51:f1:0f:b1:6d:
                    31:a8:4e:bd:53:7c:01:cc:a4:19:c7:9d:2f:3e:16:
                    20:ca:17:61:69:2e:c1:92:43:bb:ba:ec:51:60:be:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:38:6E:B0:18:D2:48:3D:7F:88:4D:B5:FD:F9:C2:3F:33:E3:26:F9
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GThusBjSSD1_iE21_fnCPzPjJvk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.253.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:81:83:1e:43:a1:d6:f0:15:25:10:5d:2d:9c:3a:f6:a0:47:
         12:f6:d9:09:d7:55:4b:dd:42:2b:40:26:df:d5:29:04:d4:b1:
         7d:70:64:d1:92:af:a9:12:7d:9c:bd:cb:38:e8:f7:0c:07:d4:
         f0:0c:a4:5e:3a:5d:82:77:7b:ee:6d:3e:7f:82:e7:06:1f:a6:
         5e:81:0c:27:1d:e0:10:ca:fa:89:53:6d:9f:0c:72:3d:f8:a7:
         5b:f4:34:44:82:d0:68:81:f4:39:ea:ee:91:0c:72:ed:02:59:
         05:d3:86:15:48:c5:90:90:77:df:3b:df:71:3c:3f:c8:85:1a:
         1d:ba:39:eb:41:44:0c:c6:72:19:bf:58:6b:03:5a:8b:c1:5f:
         6a:87:7f:77:3e:ce:b1:23:e3:25:a5:31:d9:10:13:4d:12:5d:
         42:f6:ab:39:76:21:47:da:be:57:e1:11:b2:a3:72:2c:8d:2f:
         8b:25:70:93:76:dc:e4:0a:ab:5a:f1:7b:56:46:b0:a7:7f:43:
         74:d0:bd:00:51:a1:78:0c:3b:d1:3c:97:dd:94:6d:c6:72:09:
         8b:a8:56:34:19:b5:13:49:2e:7f:4e:96:65:3c:1c:b0:0e:ac:
         3a:c3:90:37:71:6b:56:17:8c:c0:87:b7:b8:26:74:cc:73:1d:
         43:6d:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:43 2026 by rpki-client